amlcheckpro[.]com

Analysis of amlcheckpro.com shows a newly registered domain (created February 21, 2026) hosted on a DigitalOcean server in Germany (AS14061, IP 164.92.252.202). The site presents a TLS certificate from Let’s Encrypt (YR2) and responds with an HTTP 308 redirect, indicating a permanent move to another URL. The page title "AML Check Pro - Blockchain Transaction Verification" and the listed scam type "Crypto Scam" suggest the domain is being used to lure victims into a cryptocurrency‑related phishing campaign. The domain is registered through GoDaddy.com, LLC and uses GoDaddy’s default nameservers ns65.domaincontrol.com and ns66.domaincontrol.com. Reputation data is poor: Gridinsoft assigns a score of 0/100, and one of ninety‑three VirusTotal scanners has flagged the domain. It appears on a single external blocklist and is already blocked by the PhishDestroy service. While the exact phishing payload has not been captured, the combination of a recent registration, low trust score, and a crypto‑focused title aligns with typical credential‑stealing infrastructure. Defenders should consider adding the IP address 164.92.252.202 to network blocklists, monitoring DNS queries for amlcheckpro.com, and employing sinkholing or domain‑takedown procedures where feasible. Continuous re‑scanning is advised to detect any changes in malicious content or additional vendor detections.